DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
41b2e64352ecff5dc8d8e258089b760c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41b2e64352ecff5dc8d8e258089b760c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41b2e64352ecff5dc8d8e258089b760c_JaffaCakes118
Size
39KB
MD5
41b2e64352ecff5dc8d8e258089b760c
SHA1
468866657207b048a8e0a463879509fd7546a2f5
SHA256
1d4b66d278c2efa4432f56cc6829ca78fc06766f4e0183c382eadc424bcc41d7
SHA512
a3cd0837939ad13df8a4b9dabda565bd92fd199619164ae078843b08907c60ddb6ce6a6655dc40c2709137483e06fea9e3924e8aee6fe0fef77153b77c917475
SSDEEP
768:qMy2WqptGUYv0ZjFV7zYU9wrypDcsJgSLZpC6vKHR:3ygptGhKj/YU9wrQ/h9
Checks for missing Authenticode signature.
resource |
---|
41b2e64352ecff5dc8d8e258089b760c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrW
StrRChrA
StrCmpNA
StrStrW
StrCatW
StrCmpIW
StrToIntA
StrCmpW
StrStrIA
lstrcmpA
CreateThread
CreateMutexA
ResetEvent
ExitThread
GetTickCount
Sleep
WaitForSingleObject
GetModuleFileNameW
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
lstrcatA
lstrcpyA
InitializeCriticalSection
HeapDestroy
VirtualProtect
DeleteFileW
CreateProcessW
GetBinaryTypeW
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetLastError
CreateDirectoryW
GetTempPathW
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
HeapCreate
GetUserDefaultLangID
GetLocaleInfoA
GetSystemDefaultLangID
GetVersionExW
Process32NextW
WideCharToMultiByte
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessA
GetModuleFileNameA
CreateFileA
MultiByteToWideChar
ReadFile
GetFileSize
GetTimeFormatA
GetDateFormatA
FindClose
FindNextFileA
DeleteFileA
UnmapViewOfFile
FindFirstFileA
PulseEvent
CreateEventA
GetModuleHandleW
MapViewOfFile
CreateFileMappingW
LeaveCriticalSection
MoveFileA
EnterCriticalSection
GetModuleHandleA
CreateWindowExW
GetWindowRect
SetTimer
wsprintfA
GetSystemMetrics
DestroyWindow
DispatchMessageW
GetClientRect
ShowWindow
DefWindowProcW
GetMessageW
TranslateMessage
RegisterClassExW
ShellExecuteA
SHGetSpecialFolderPathA
OleInitialize
CoCreateInstance
CoInitializeEx
SysFreeString
SysAllocStringLen
VariantInit
SysAllocString
SafeArrayUnlock
SafeArrayLock
SysAllocStringByteLen
VariantClear
VariantCopy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ